Configuring the Attributes Obtained at Authentication

When Identity Server creates its request to send to the identity provider, it uses the attributes that you have selected. The request asks the identity provider to provide values for these attributes. You can then use these attributes to create policies, to match user accounts, or if you allow provisioning, to create a user account on the service provider.

  1. On the Home page, click Applications > Select a Cluster > [Identity Provider] > Attributes.

  2. (Conditional) To create an attribute set, select New Attribute Set from the Attribute Set list.

    An attribute set is a group of attributes that can be exchanged with the trusted provider. For example, you can specify that the local attribute of any attribute in the Liberty profile (such as Informal Name) matches the remote attribute specified at the service provider.

    1. Specify a set name, then click Next.

    2. On the Define Attribute Set page, click Plus icon.

    3. Select a local attribute.

    4. Optionally, provide the name of the remote attribute and a namespace.

      For more information about this process, see Configuring Attribute Sets.

    5. To add other attributes to the set, repeat Step 2.b through Step 2.d.

    6. Click Save.

  3. Select an attribute set

  4. Select attributes from the Obtain at authentication list.

  5. Click Done > Save.

  6. Update Identity Server.